CVE-2013-10007 : A vulnerability classified as problematic has been found in ethitter WP-Print-Friendly up to 0.5.2. This affects an unkn

A vulnerability classified as problematic has been found in ethitter WP-Print-Friendly up to 0.5.2. This affects an unknown part of the file wp-print-friendly.php. The manipulation leads to information disclosure. It is possible to initiate the attack remotely. Upgrading to version 0.5.3 is able to address this issue. The identifier of the patch is 437787292670c20b4abe20160ebbe8428187f2b4. It is recommended to upgrade the affected component. The identifier VDB-217269 was assigned to this vulnerability.

Published 2023-01-03 11:15:10

Updated 2024-04-11 00:49:50

Source VulDB

View at NVD, CVE.org

Vulnerability category: Information leak

Exploit prediction scoring system (EPSS) score for CVE-2013-10007

Probability of exploitation activity in the next 30 days: 0.09%

Percentile, the proportion of vulnerabilities that are scored at or less: ~ 39 % EPSS Score History EPSS FAQ

CVSS scores for CVE-2013-10007

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
5.0	MEDIUM	AV:N/AC:L/Au:N/C:P/I:N/A:N	10.0	2.9	VulDB
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: None Availability Impact: None
5.3	MEDIUM	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N	3.9	1.4	VulDB
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: Low Integrity: None Availability: None
5.3	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N	3.9	1.4	VulDB
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: Low Integrity: None Availability: None
7.5	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N	3.9	3.6	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: None Availability: None

CWE ids for CVE-2013-10007

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Assigned by: cna@vuldb.com (Primary)

References for CVE-2013-10007

https://github.com/ethitter/WP-Print-Friendly/pull/4

Version 0.5.3 - Security Update by stevenkword · Pull Request #4 · ethitter/WP-Print-Friendly · GitHub
Patch;Third Party Advisory
https://github.com/ethitter/WP-Print-Friendly/commit/437787292670c20b4abe20160ebbe8428187f2b4

Version 0.5.3 - Security Update · ethitter/WP-Print-Friendly@4377872 · GitHub
Patch;Third Party Advisory
https://vuldb.com/?ctiid.217269

CVE-2013-10007 | ethitter WP-Print-Friendly wp-print-friendly.php information disclosure
Third Party Advisory
https://vuldb.com/?id.217269

CVE-2013-10007 | ethitter WP-Print-Friendly wp-print-friendly.php information disclosure
Third Party Advisory

Products affected by CVE-2013-10007

Wp-print-friendly Project » Wp Print Friendly » For Wordpress
Versions before (<) 0.5.3
cpe:2.3:a:wp-print-friendly_project:wp_print_friendly:*:*:*:*:*:wordpress:*:*
Matching versions

Vulnerability Details : CVE-2013-10007

Exploit prediction scoring system (EPSS) score for CVE-2013-10007

CVSS scores for CVE-2013-10007

CWE ids for CVE-2013-10007

References for CVE-2013-10007

Products affected by CVE-2013-10007